Config translation failed [Reason: Distributed Firewall failed with "NoneType' object has no attribute 'append"]
search cancel

Config translation failed [Reason: Distributed Firewall failed with "NoneType' object has no attribute 'append"]

book

Article ID: 405343

calendar_today

Updated On:

Products

VMware NSX Data Center for vSphere VMware NSX for vSphere VMware NSX

Issue/Introduction

During V2T Migration, while performing "Translate L2, L4-L7 Configuration" the workflow fails immediately with below error messages
Config translation failed [Reason: Distributed Firewall failed
with "NoneType' object has no attribute 'append"]

Config translation failed [Reason: ]

Environment

VMware NSX-T DataCenter

 

Cause

This issue occurs when the 'Applied To' field of Distributed Firewall (DFW) rules does not explicitly reference a security group. The DFW plugin's sg_util method, which is responsible for creating temporary security groups for policy application, encounters a None type error because an internal policy mapping file is not correctly initialized or lacks an empty default state.

Resolution

For any identified security groups that are not actively contributing to DFW rules, ensure that the dependency of the respective VMs (like vm-4######) is cleared or removed from these security groups within NSX-V. This prevents the migration coordinator from attempting to translate non-existent references.

Additional Information

Logs to isolate the issue:

/var/log/migration-coordinator/summary.log

"stage": "xlate",
"status": "error"
"api_count": 318,
"feedback_requests_count": 9,
"sub_stage": "13-17",
"errors": [

"category": "Unexpected error",
"error": "Distributed Firewall failed with ''NoneType' object has no attribute 'append''"

/var/log/migration-coordinator/v2t/cm.log

2025-04-26 08:15:59, 986 1861965 CM.plugins.securitygroup. sg_utils_multivc DEBUG Updated Policy group mapping
2025-4-2602:15:59, 986 1861965 CM.plugins.securitygroup.sg_utils_multivc INFO Created Wrapper Group url : /infra/domains/default/groups/dfw_vm-42#### applied_to, with api <engine.t_api.NsxPolicyApi object at 0x########> and internal api : None, sg applied to api : <engine.t_api.NsxPolicyApi object at 0x########>
2025-04-26 08:15:59,986 1861965 CM.plugins.dfw_plugin DEBUG DFW Received following wrapper and internal group api from sg_utils, Wrapper Group url : /infra/domains/default/groups/dfw_vm-42####applied_to, Wrapper Group api : <engine.t_api.NsxPolicyApi object at 0x########>, internal api : None, sg_applied_to_api: <engine. t_api.NsxPolicyApi object at 0x########>
2025-04-26 08:15:59,986 1861965 CM.plugins.xlate plugin DEBUG Loading from nsx-v backup files named services.securitygroup.vm-4######. translation.ipaddresses under /var/log/migration-coordinator/v2t/nsxv-config/
2025-04-26 08:15:59,987 1861965 CM.plugins.xlate _plugin DEBUG Loaded 1 objects
2025-04-26 08:15:59,987 1861965 CM.plugins.dfw_plugin INFO Translating group info: gp_type: VirtualMachine, gp_value: vm-4######
2025-04-26 08:15:59,987 1861965 CM.plugins.securitygroup.sg_utils_multivc INFO Creating temp url, apis for SG: dfw_vm-4###### applied_to used in appliedto
2025-04-26 08:15:59, 987 1861965 CM.plugins.securitygroup.sg_utils_multivc DEBUG Created temporary SG for applied to with url: {/infra/domains/default/groups/AppliedTo_SM-N#######NE-Ilapplied_to_dfw_vm-4######applied_to}.
2025-04-26 08:15:59,987 1861965 CM.plugins.securitygroup.sg_utils_multivc DEBUG Paths : ['/infra/domains/default/groups/AppliedTo_SM-N######-N####NE-Ilapplie
d_to_dfw_vm-4###### applied_to']
2025-04-26 08:15:59,987 1861965 CM.plugins.securitygroup.sg_utils_multivc INFO No expression found adding applied to expression {'resource_type': 'PathExpression', 'paths': ['/i
nfra/domains/default/groups/AppliedTo_SM-N#########NE-Ilapplied_to_dfw_vm-4######applied_to']}.
2025-04-26 08:15:59,988 1861965 CM.plugins.securitygroup.sg_utils_multivc INFO Path expression after applied to: [{'resource_type': 'PathExpression', 'paths': ['/infra/domains/d
efault/groups/AppliedTo_SM-N#########NE-Ilapplied_to_dfw_vm-4######applied_to']]]
2025-04-26 08:15:59,988 1861965 CM.plugins.securitygroup.sg_utils_multivc DEBUG Member expression to be added in the wrapper group : [{'resource_type': 'PathExpression', 'paths'
: ['/infra/domains/default/groups/AppliedTo_SM-N#########NE-Ilapplied_to_dfw_vm-4######applied_to']}]
Storing url: /infra/domains/default/groups/dfw_vm-4######applied_to
2025-04-26 08:15:59,990 1861965 CM.plugins.securitygroup.sg_utils_multivc DEBUG
2025-04-26 08:15:59,990 1861965 CM.plugins.securitygroup.sg_utils_multivc DEBUG
2025-04-26 08:15:59,990 1861965 CM.plugins.securitygroup.sg_utils_multivc DEBUG
2025-04-26 08:15:59,991 1861965 CM.plugins.securitygroup.sg_utils_multivc DEBUG
2025-04-26 08:15:59,991 1861965 CM.plugins.securitygroup.sg_utils_multivc INFO Created Wrapper Group url : /infra/domains/default/groups/dfw_vm-4######applied_to, with api : <engine.t_api.NsxPolicyApi object at 0x########> and internal api : None, sg applied to api : <engine.t_api.NsxPolicyApi object at 0x########>
2025-04-26 08:15:59,991 1861965 CM.plugins.dfw_plugin DEBUG DFW Received following wrapper and internal group api from sg_utils, Wrapper Group url : /infra/domains/default/group
s/dfw_vm-4######applied_to, Wrapper Group api : <engine.t_api.NsxPolicyApi object at 0x########>, internal api : None, sg_applied_to_api: <engine.t_api.NsxPolicyApi object at 0x########>
2025-04-26 08:15:59,991 1861965 CM.plugins.dfw_plugin INFO Creating 1 Groups
Stored 318 apis
------ Stage xlate: error

 

Powered by Wolken Software